From 7c1c02b4b226877cc1ea12bd46b2325472ac7410 Mon Sep 17 00:00:00 2001
From: Matt Turner <mattst88@gentoo.org>
Date: Wed, 8 Nov 2017 15:36:14 -0800
Subject: [PATCH] package.mask: Mask vulnerable versions of libXfont

Bug: https://bugs.gentoo.org/634044
---
 profiles/package.mask | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/profiles/package.mask b/profiles/package.mask
index 610525adf369..a58c5d739872 100644
--- a/profiles/package.mask
+++ b/profiles/package.mask
@@ -29,6 +29,11 @@
 
 #--- END OF EXAMPLES ---
 
+# Matt Turner <mattst88@gentoo.org> (08 Nov 2017)
+# Vulnerable to CVE-2017-13720, CVE-2017-13722 (bug #634044). Only in tree for
+# masked xorg-server-1.12.
+<x11-libs/libXfont-1.5.0
+
 # Brian Evans <grknight@gentoo.org> (07 Nov 2017)
 # Remote service removed this method, dead upstream
 # Masked for removal in 30 days.
-- 
2.26.2